Method and operation of a portable device and a cloud server for preserving the chain of custody for digital evidence

ABSTRACT

A process for preserving chain of custody for digital evidence captured at a portable device. The portable device transmits a request to upload the digital evidence to the cloud server via an intermediary storage device. The request includes digitally signed evidence metadata with data integrity code and authentication credentials. The portable device receives a response indicating approval to upload the digital evidence to the cloud server via the intermediary storage device. The portable device transmits the digital evidence to the intermediary storage device for uploading to the cloud server, and further transmits a request for approval to delete the digital evidence from the portable device. The portable device deletes the digital evidence only after receiving a response from the cloud server indicating an approval to delete the digital evidence from the portable device.

BACKGROUND OF THE INVENTION

Public safety agencies record and store large amount of digital data forinvestigation and record purposes. Some of the recorded data is alsopresented in the court as an evidence. However, since such data is oftentransferred from one device to another device, it is important topreserve the chain of custody for data in order for the data to beadmitted as an evidence.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

The accompanying figures, where like reference numerals refer toidentical or functionally similar elements throughout the separateviews, which together with the detailed description below, areincorporated in and form part of the specification and serve to furtherillustrate various embodiments of concepts that include the claimedinvention, and to explain various principles and advantages of thoseembodiments.

FIG. 1 is a system diagram illustrating a system in accordance with someembodiments.

FIG. 2 is an example of a multi-unit charger that is employed as anintermediary storage device in accordance with some embodiments.

FIG. 3 is a device diagram showing a device structure of a portabledevice of the system of FIG. 1 in accordance with some embodiments.

FIG. 4 illustrates a flowchart of a method of operating a portabledevice to preserve chain of custody for digital evidence captured at theportable device in accordance with some embodiments.

FIG. 5 illustrates a flowchart of a method of operating a cloud serverto preserve chain of custody for digital evidence captured at theportable device in accordance with some embodiments

Skilled artisans will appreciate that elements in the figures areillustrated for simplicity and clarity and have not necessarily beendrawn to scale. For example, the dimensions of some of the elements inthe figures may be exaggerated relative to other elements to help toimprove understanding of embodiments of the present invention.

The apparatus and method components have been represented whereappropriate by conventional symbols in the drawings, showing only thosespecific details that are pertinent to understanding the embodiments ofthe present invention so as not to obscure the disclosure with detailsthat will be readily apparent to those of ordinary skill in the arthaving the benefit of the description herein.

DETAILED DESCRIPTION OF THE INVENTION

As mentioned above, preserving the chain of custody for recorded dataeven after the data is transferred from a source device (e.g., a camera)to another device (e.g., a data storage server) is an importantrequirement for admitting the recorded data into evidence. Preservingthe chain of custody means that the data is only transferred to and/orstored at devices authorized and trusted for such purposes. It is alsoimportant to ensure that the data is not tampered with or modified byintermediaries during the transfer of the data from one device toanother device.

Public safety agencies assign portable devices such as cameras toofficers for capturing digital evidence such as image and/or video data.The captured digital evidence is transferred to a central evidentiaryrepository (e.g., a data storage server) for further processing so thatthe cameras can be reused for recording another evidence and/orre-assigned to another user (e.g., after the current officer's workshift). However, portable devices may only have limited storage capacitycompared to a storage capacity of the data storage server. Also, someportable devices may not have network capability or may have onlylimited network capability to stream/transfer the captured data to theserver. Further, some portable devices may not have enough batterycapacity to fully support the transfer of the digital evidence to theserver. To address the above issues, intermediary storage devices, thathave larger storage capacity, larger battery capacity, or better networkcapability relative to portable devices, are used to assist the portabledevices in successfully transferring the recorded data to therepository. Some intermediary storage devices such as multi-unitchargers are also capable of charging (e.g., via wired or wirelesscharging means) the portable devices during the transfer of the digitalevidence.

In such situations when intermediary storage devices are employed fordata transfer, it is also important to ensure that the chain of custodyfor the digital evidence is not violated. Additionally, it is importantthat the authenticity of the intermediary storage devices is validatedto ensure that the digital evidence is not transferred to an un-trustedmalicious entity. Further, portable devices are often shared among theusers in organizations such as public safety. Such organizations mayprefer that the digital evidence is transferred to the evidentiaryrepository prior to device being made available for a new user, forexample, where there is a need to redeploy the device for re-assignmentto a new user at the end of work shift of the previous user. During there-assignment process, there is a possibility of the chain of custodyfor digital evidence being violated when the new user attempts to accessthe digital evidence previously stored at the device or when the deviceis placed for re-assignment, for example, on a shared shelf where thereis a chance for the device to be lost or stolen, or the digital evidenceto be modified or tampered with by a malicious person. So, it is alsoimportant to ensure that the digital evidence is fully transferred tothe evidentiary repository prior to the device re-assignment to preventviolation of chain of custody during re-assignment of the device fromone user to another user. This also requires that the digital evidenceis not erased from the source portable device before the digitalevidence is completely transferred to the server and acknowledged assuch. Disclosed is an improved process that addresses the abovepresented technical issues and requirement in preserving the chain ofcustody for digital evidence captured at portable devices.

One exemplary embodiment provides a method for preserving chain ofcustody for digital evidence captured at a portable device. The methodcomprises transmitting, at the portable device, to a cloud server, arequest for approval to upload the digital evidence to the cloud servervia an intermediary storage device, the request comprising a digitallysigned metadata associated with the digital evidence, a firstauthentication credential associated with the intermediary storagedevice, and a second authentication credential associated with theportable device, wherein the digitally signed metadata includes a dataintegrity code that is generated as a function of the content of thedigital evidence to be uploaded; receiving, at the portable device, afirst response to the request for approval from the cloud server, thefirst response indicating approval to upload the digital evidence to thecloud server via the intermediary storage device; responsive toreceiving the first response, transmitting, at the portable device, thedigital evidence to the intermediary storage device for uploading to thecloud server; transmitting, at the portable device, to the cloud server,a request for approval to delete the digital evidence from the portabledevice; receiving, at the portable device, a second response from thecloud server, the second response indicating an approval to delete thedigital evidence from the portable device; and responsive to receivingthe second response, deleting, at the portable device, the digitalevidence from the portable device.

Another exemplary embodiment provides a method for preserving chain ofcustody for digital evidence captured at a portable device. The methodcomprises: receiving, at a cloud server, from the portable device, arequest for approval to upload the digital evidence to the cloud servervia an intermediary storage device, the request comprising digitallysigned metadata associated with the digital evidence, a firstauthentication credential associated with the portable device, and asecond authentication credential associated with the intermediarystorage device, wherein the digitally signed metadata includes a dataintegrity code that is generated as a function of the digital evidenceto be uploaded; verifying, at the cloud server, whether the request isvalid based on the information included in the digitally signedmetadata, first authentication credential, and second authenticationcredential; responsive to verifying that the request is valid,transmitting, at the cloud server, to the portable device, a firstresponse indicating approval to upload the digital evidence to the cloudserver via the intermediary storage device; receiving, at the cloudserver, in response to transmitting the first response, the digitalevidence from the portable device via the intermediary storage device;validating, at the cloud server, the data integrity of received digitalevidence using the data integrity code; storing the received digitalevidence at a cloud storage component associated with the cloud serverwhen the data integrity of the received digital evidence is valid;receiving, at the cloud server, a request for approval to delete thedigital evidence from the portable device; and transmitting, at thecloud server, a second response indicating an approval to delete thedigital evidence from the portable device.

A further exemplary embodiment provides a portable device, comprising: amemory for storing a captured digital evidence; a communications unitconfigured to be coupled with an intermediary storage device fortransferring the digital evidence to a cloud server via the intermediarystorage device; and an electronic processor communicatively coupled withthe memory and communications unit, the electronic processor configuredto: transmit, via the communications unit, to a cloud server, a requestfor approval to upload the digital evidence to the cloud server via theintermediary storage device, the request comprising a digitally signedmetadata associated with the digital evidence, a first authenticationcredential associated with the intermediary storage device, and a secondauthentication credential associated with the portable device, whereinthe digitally signed metadata includes a data integrity code that isgenerated as a function of the digital evidence to be uploaded; receive,via the communications unit, a first response to the request forapproval from the cloud server, the first response indicating approvalto upload the digital evidence to the cloud server via the intermediarystorage device; responsive to receiving the first response, transmit,via the communications unit, the digital evidence to the intermediarystorage device for uploading to the cloud server; transmit, via thecommunications unit, to the cloud server, a request for approval todelete the digital evidence from the memory; receive, via thecommunications unit, a second response from the cloud server, the secondresponse indicating an approval to delete the digital evidence from theportable device; and responsive to receiving the second response, deletethe digital evidence from the memory.

Each of the above-mentioned embodiments will be discussed in more detailbelow, starting with an example system including a portable device, anintermediary storage device, and a cloud server in which the embodimentsmay be practiced, followed by an illustration of processing steps forachieving the method of operating the portable device and cloud server.Further advantages and features consistent with this disclosure will beset forth in the following detailed description, with reference to thefigures.

Referring now to drawings and in particular to FIG. 1, a communicationsystem diagram illustrates a system 100 including a portable device 110,an intermediary storage device 120, and a cloud server 130. The portabledevice 110 may be any computing device that is capable of capturingand/or storing digital evidence 140 that may take form of an audio,image, video, text, and the like. In accordance with some embodiments,the portable device 110 may be operated or associated with a publicsafety agency officer, who may carry or wear the portable device 110. Inone embodiment, the portable device 110 is a body wearable camera thatis used to capture digital evidence 140 in the form of image and/orvideo data. An example portable device 110 in the form of a bodywearable camera is shown in FIG. 1 with a display presenting a thumbnailof a video evidence that is captured corresponding to a burglaryincident. In accordance with some embodiments, the portable device 110has one or more of limited storage capacity, limited battery capacity,and limited or no network capability in comparison to the intermediarystorage device 120 (for example, that has one or more of larger storagecapacity, larger battery capacity (or unlimited power supply), or betternetwork capability), and therefore establishes a connection with theintermediary storage device 120 for uploading the captured digitalevidence 140 to the cloud server 130.

The intermediary storage device 120 may be any data storage device thatis capable of being communicatively coupled to the portable device 110via a first communication link 150 at one end and further capable ofbeing communicatively coupled to the cloud server 130 via a secondcommunication link 160 at other end to facilitate the transfer of thedigital evidence 140 captured at the portable device 110 to the cloudserver 130. In one embodiment, the communication link 150 corresponds toa short range wireless connection that is established, for example, inaccordance with one or more communication protocols/standards such asBluetooth, Wi-Fi, Zigbee, Z-Wave, or infrared wireless connection, thatenables the intermediary storage device 120 to wirelessly receive thedigital evidence 140 from the portable device 110 for further uploadingthe digital evidence 140 to the cloud server 130. In another embodiment,the first communication link 150 corresponds to a wired connection(e.g., established using a data cable) to the portable device 110 toenable the transfer of the digital evidence 140. In yet anotherembodiment, the first communication link 150 can be established viaphysical coupling of the portable device 110 to the intermediary storagedevice 120, which can be achieved when one or more contacts (e.g.,battery/data contacts) of the intermediary storage device 120 arealigned and mated with the corresponding one or more contacts of theportable device 110. This embodiment is further illustrated in FIG. 2,where an intermediary storage device 120 functioning as a multi-unitcharger 200 is shown.

Briefly referring to FIG. 2, a multi-unit charger 200 employed as anintermediary storage device 120 for transferring the digital evidence140 to the cloud server 130 is shown. The multi-unit charger 200 iscapable of charging multiple portable devices 110 simultaneously whenthe portable devices 110 (e.g., cameras) are coupled to the charger 200.In addition to the charging function, the multi-unit charger shown inFIG. 2 also includes a communications module 210 that includes necessaryhardware and firmware components for enabling the multi-unit charger 200to communicate with remote devices such as the cloud server 130 fortransferring the digital evidence 140 from the portable device 110 tothe cloud server 130, via the second communication link 160. Forexample, as shown in FIG. 2, the communications module 210 includes alocal area network (LAN) interface and/or a wide area network (WAN)interface 220, that can be used to establish the second communicationlink 160 to transfer digital evidence 140 such as video that requireshigh bandwidth connection for data transfer. In other embodiments, thesecond communication link 160 is established using one or more wirelessair-interface standards (e.g., long term evolution (LTE) standard) thatsupport transfer of high bandwidth data such as video. The multi-unitcharger 200 can be employed for use in public safety agencies such aspolice departments, where there is often a need, between the workshifts, to simultaneously charge the portable device 110 as well asoffload the data (such as digital evidence 140 recorded during theshift) to a storage server (e.g., cloud server 130) to enable theportable device 110 to be available for reassignment before the nextshift.

Returning to FIG. 1, the cloud server 130 includes one or more ofphysical or logical servers that are hosted through a cloud computingplatform via a network, and are further capable of providing applicationservices including storing and preserving chain of custody for digitalevidence 140 transferred from the portable device 110 via theintermediary storage device 120. The cloud server 130 includes or isconnected to one or more cloud storage devices/components at which thedigital evidence 140 transferred from the portable device 110 is stored.The network may be a local area network, metropolitan area network, awide area network, such as the internet or intranet, or a combinationthereof. In accordance with some embodiments, the cloud server 130verifies the authenticity of the portable device 110 (for example, viaan authentication server associated with the cloud server 130) andintermediary storage device 120 before the digital evidence 140 can betransferred from the portable device 110 to the cloud server 130 via theintermediary storage device 120.

FIG. 3 is a block diagram of an example portable device 110. Theportable device 110 is an electronic device including a processing unit310, a static memory 320, a camera 330, a user interface unit 340, anelectronic display 350, a communications unit 360, a microphone 370, anda speaker 380. The portable device 110 is presented as an example devicethat may be programmed and configured to carry out the functionsdescribed herein, for example, for preserving the chain of custody fordigital evidence 140 captured at the portable device 110. In someembodiments, depending on the type of the portable device 110, theportable device 110 may include fewer or additional components inconfigurations different from that illustrated in FIG. 3. For example,when the portable device 110 is implemented as a standalone camera, theportable device 110 may include limited or no network capability, andtherefore one or more components associated with the communications unit360 are not implemented at the portable device 110. In otherembodiments, the components associated with the portable device 110 areimplemented in a distributed manner in multiple electronic devices thatinterface and/or communicate with each other to perform the functionsdescribed herein. Other combinations are possible as well.

The processing unit 310 includes a code Read Only Memory (ROM) 312coupled to a common data and address bus 314 for storing data forinitializing system components. The use of control and data buses 314for the interconnection between and exchange of information among thevarious modules and components would be apparent to a person skilled inthe art in view of the description provided herein. The processing unit310 further includes an electronic processor 316 coupled by the commondata and address bus 314, to a Random Access Memory (RAM) 318 and thestatic memory 320. The electronic processor 316 may include hardwareports for coupling to different components of the portable device 110.The electronic processor 316 includes one or more logic circuits, one ormore processors, one or more microprocessors, one or more ASIC(application-specific integrated circuits) and one or more FPGA(field-programmable gate arrays), and/or another electronic device. Insome embodiments, the electronic processor 316 is not a genericcontroller and/or a generic device, but a device specifically configuredto implement a functionality for transferring digital evidence 140(stored in static memory 320) to the cloud server 130 via theintermediary storage device 120 while preserving the chain of custodyfor the digital evidence 140. In some embodiments, the electronicprocessor 316 specifically comprises a computer executable engineconfigured to implement specific functionality for transferring thedigital evidence 140 to the cloud server 130 via the intermediarystorage device 120.

The static memory 320 may store operating code 322 for the electronicprocessor 316 that, when executed, performs one or more of theoperations set forth in the accompanying figures and text. The staticmemory 320 may comprise non-transitory computer-readable mediacomponents, for example hard-disk drive (HDD), an optical disk drivesuch as a compact disk (CD) drive or digital versatile disk (DVD) drive,a solid state drive (SSD), a tape drive, a flash memory drive, or a tapedrive, and the like.

The static memory 320 further stores digital evidence 140 thatcorresponds to one or more of: a video or image data captured via thecamera 330, an audio data captured via the microphone 370, or text dataentered by user via the user interface unit 340. In other embodiments,the digital evidence 140 additionally includes sensor data captured byone or more sensors (not shown) (e.g., biometric sensor, motion sensor,sonar sensor, etc.) associated with the portable device 110. In additionto storing the digital evidence 140, the static memory 320 is furtherconfigured to store digital evidence metadata 324 associated with thedigital evidence 140. The digital evidence metadata 324 includesinformation corresponding to one or more of: an identifier (e.g., nameof a video file corresponding to the digital evidence 140) uniquelyidentifying the digital evidence 140; a user profile or identifier ofthe owner of the portable device 110 or of the user operating theportable device 110 at the time the digital evidence 140 wascaptured/stored; a data type/format (e.g., video, audio, text etc.) ofdigital evidence 140; a time stamp of capturing/storing the digitalevidence 140; a data size of the digital evidence 140; location dataidentifying locations at which the digital evidence 140 was captured; anincident identifier (e.g., computer aided dispatch (CAD) identifierassociated with the burglary incident) corresponding to an incidentassigned to the user of the portable device 110; one or more data tags,for example, identifying person, object, or entity of interestassociated with the digital evidence 140; and one or more environmentaldata (e.g., sensor data such as temperature, ambient noise etc.)corresponding to a location at which the digital evidence 140 wascaptured.

In accordance with the embodiments, the digital evidence metadata 324further includes a data integrity code that is generated as a functionof the digital evidence 140. The data integrity code allows a receiver(e.g., intermediary storage device 120 or cloud server 130) of thedigital evidence 140 to validate the data integrity of the digitalevidence 140. The data integrity code is generated and the correspondingdata integrity validation process is implemented using error detectionalgorithms, including, but not limited to, checksums, hash functions,cyclic redundancy checks, and message authentication codes (MACs).

The camera 330 includes imaging components such as image sensors andoptical components (e.g., lenses) that are controlled by the electronicprocessor 316 to capture images by sensing light in at least the visiblespectrum. The images refer to one or more digital images or sequence ofimages such as a video of a target object captured by the camera 330. Inaccordance with some embodiments, the images captured by the camera 330are stored and marked as digital evidence 140.

The user interface unit 340 operates to receive input from, for example,a user of the portable device 110, to provide system output, or acombination of both. The user interface unit 340 obtains information andsignals from, and provides information and signals to, devices bothinternal and external to the portable device 110 (for example, over oneor more wired and/or wireless connections). Input may be provided viadifferent hardware and software elements, for example, a keypad, mouse,microphone, soft keys, icons, or soft buttons on the electronic display350, a scroll ball, physical buttons, control knobs and the like. Inaccordance with some embodiments, the user of the portable device 110may manually input data (e.g., notes from interviewing the witnesses)associated with the digital evidence 140 via the user interface unit340. The user interface unit 340 also allows the user of the portabledevice 110 to mark particular stored data, for example, of an image, ora video, or text, as digital evidence 140. In other embodiments, theelectronic processor 316 of the portable device 110 marks all datacaptured at the portable device, by default, as digital evidence 140.The portable device 110 may automatically or based on input receivedfrom the user via the user interface unit 340, links the capturedevidence to a particular incident (e.g., burglary incident) assigned tothe user for investigation. In these embodiments, the user of theportable device 110 may not be authorized to erase any data captured andstored at the memory 320 unless a permission is received from the cloudserver 130 after the digital evidence 140 is successfully transferredand validated for data integrity at the cloud server 130.

The electronic display 350 may be provided for displaying digitalevidence 140 including images, video, and/or text to the user of theportable device 110. The electronic display 350 may be, for example, aliquid crystal display (LCD) screen or an organic light emitting display(OLED) display screen. In some embodiments, a touch sensitive inputinterface may be incorporated into the electronic display 350 as well,allowing the user of the portable device 110 to interact with contentprovided on the electronic display 350.

The communications unit 360 may include one or more wired and/orwireless input/output (I/O) interfaces 352 that are configurable toenable the portable device 110 to communicate with other devices, suchas the intermediary storage device 120 and the cloud server 130. In oneembodiment, the portable device 110 may obtain the digital evidence 140and/or digital evidence metadata 324 from other devices or systems viathe communications unit 360. The communications unit 360 may include ashort-range transmitter such as a Bluetooth™, Zigbee™, or NFC (nearfield communication) transmitter) with other communication devicesand/or an infrastructure RAN (e.g. a wireless communications tower, acellphone tower, and the like). One or more wireless transceivers 354may include a long-range transmitter which may implement a direct-mode,conventional, or trunked land mobile radio (LMR) standard, TerrestrialTrunked Radio (TETRA), or other radio protocols or standards (e.g., LTEstandard). The communications unit 360 may additionally or alternativelyinclude one or more wireline transceivers 354, such as an Ethernettransceiver, a universal serial bus (USB) transceiver, or similartransceiver configurable to communicate via a twisted pair wire, acoaxial cable, a fiber-optic link, or a similar physical connection to awireline network. The transceiver 354 is also coupled to a combinedmodulator/demodulator 356. In some embodiments, the network capabilityof the portable device 110 may be limited in terms of bandwidth,transmission data rate, or transmission range, and therefore theintermediary storage device 120 with better network capability may beemployed by the portable device 110 for transferring the digitalevidence 140 to the cloud server 130.

The microphone 370 may be present for capturing audio from a user and/orother environmental or background audio that is further processed by theprocessing unit 310 and/or is stored/transmitted as digital evidence140.

The portable device 110 may further include a speaker 380 forreproducing audio from voice data during playback of the digitalevidence 140, or may playback alert tones or other types of pre-recordedaudio, for example, to indicate that the device 110 is available forreassignment.

In accordance with embodiments, the cloud server 130 includes one ormore similar components as illustrated in FIG. 3. In one embodiment, thecloud server 130 similarly includes a processing unit, a communicationsunit, and a memory to perform the functions described herein. In someembodiments, the components associated with the cloud server 130 areimplemented in a distributed manner in multiple electronic devices thatinterface and/or communicate with each other to perform the functionsdescribed herein. Other combinations are possible as well.

FIG. 4 illustrates a flow chart diagram of a method 400 of operating aportable device 110 to preserve chain of custody for digital evidence140 captured at the portable device 110 in accordance with someembodiments. While a particular order of processing steps is indicatedin FIG. 4 as an example, timing and ordering of such steps may varywhere appropriate without negating the purpose and advantages of theexamples set forth in detail throughout the remainder of thisdisclosure. As an example, the method 400 is performed by the electronicprocessor 316 of the portable device 110. Other embodiments of themethod 400 may be performed on multiple processors within the samedevice or on multiple devices.

At block 410, the portable device 110 initiates a process oftransferring the digital evidence 140 captured at the portable device110 by transmitting a request for approval to the cloud server 130 toupload digital evidence 140 to the cloud server 130 via an intermediarystorage device 120.

In accordance with some embodiments, the portable device 110 initiatesthe process of transferring the digital evidence 140 automatically inresponse to one or more triggering events. For example, as shown in FIG.2, the triggering event may be caused when the portable device 110 isplaced in a multi-unit charger 200, for instance, for charging theportable device 110 at the end of a work shift of the user associatedwith the portable device 110. As another example, the triggering eventmay be caused when the portable device 110 receives an input from a user(e.g., user of the portable device 110) or another device (e.g., fromCAD console). The input may be a request to re-assign the portabledevice 110 from the currently assigned user to another user, oralternatively a request to transfer one or more selected digitalevidences 140 stored at the portable device 110 to the cloud server 130.As a further example, the triggering event may correspond to a repeatedevent that is triggered periodically (e.g., every 8 hours or every dayof the week at 6.00 PM). Other variations of triggering events arepossible as well.

The request for approval, as transmitted at block 410, includesdigitally signed metadata 324 and also a first authentication credentialassociated with the intermediary storage device 120 and a secondauthentication credential associated with the portable device 110. Thedigital evidence 140 may correspond to one or more of: video data, audiodata, text data, or combination thereof, that are captured at theportable device 110. The first and second authentication credentialsinclude one or more of a device/user identifier, username-password,digital certificate, encrypted key, biometric key, and the like. Thedigitally signed metadata 324 includes a data integrity code that isgenerated as a function of the digital evidence 140 to be uploaded, andfurther optionally includes information related to one or more of:identifier (e.g., name of a video file corresponding to the digitalevidence 140) uniquely identifying the digital evidence 140; a userprofile or identifier of the owner of the portable device 110 or of theuser operating the portable device 110 at the time the digital evidence140 was captured/stored; the evidence a data type/format (e.g., video,audio, text etc.) of digital evidence 140; a time stamp ofcapturing/storing the digital evidence 140; a data size of the digitalevidence 140; location data identifying locations at which the digitalevidence 140 was captured; an incident identifier (e.g., computer aideddispatch (CAD) identifier) corresponding to an incident assigned to theuser of the portable device 110; one or more data tags, for example,identifying person, object, or entity of interest associated with thedigital evidence 140; and one or more environmental data (e.g., sensordata such as temperature, ambient noise etc.) corresponding to alocation at which the digital evidence 140 was captured.

The digital evidence metadata 324 including the data integrity code isdigitally signed using a digital signature that may be created, forexample, by encrypting a hash value of the digital evidence metadata 324to be transmitted using a private key of the portable device 110. Thereceiver, for example, the cloud server 130 can verify the sender (i.e.,identity of the portable device 110) of the digital evidence metadata324 by comparing a hash value of the received digital evidence metadata324 with the hash value decoded using the sender's public key. The cloudserver 130 can verify that the sender is the portable device 110 whenthe two hash values match. While the above example is provided as anexample to illustrate how the digital evidence metadata 324 is digitallysigned for verifying the sender, variations of the above example and/orother types of digital signature algorithms can also be used todigitally sign the digital evidence metadata 324.

In accordance with some embodiments, the portable device 110 establishesa secure communication channel to directly communicate (i.e., bybypassing the intermediary storage server) with the cloud server 130 totransmit the request for approval to upload the digital evidence 140.For example, the portable device 110 may have network capability (e.g.,with a narrowband/broadband connection) to support transmission of data(such as digital evidence metadata 324) with limited data size (e.g., inthe order of kilobytes to few megabytes). In this example, the portabledevice 110 may bypass intermediary storage device 120 to transmit therequest for approval to the cloud server 130, but may requireintermediary storage device 120 that has better network capability(e.g., with a broadband connection) to route the digital evidence 140for uploading to the cloud server 130. In other embodiments, the requestfor approval may be routed to the cloud server 130 via the intermediarystorage device 120 or via another device in the system 100.

In some embodiments, prior to transmitting the request for approval toupload the digital evidence 140, the portable device 110 verifies theauthenticity of the intermediary storage device 120. In theseembodiments, the portable device 110, after identifying and/or couplingto the intermediary storage device 120 to be used for uploading thedigital evidence 140, transmits an authentication challenge to theintermediary storage device 120 via the first communication link 150. Inresponse, the portable device 110 receives an authentication challengeresponse including the first authentication credential from theintermediary storage device 120 via the first communication link 150.The portable device 110 then forwards the authentication challengerequest and response to the cloud server 130, which may act as anauthentication server or as a proxy for authentication server toauthenticate the intermediary storage device 120 using the firstauthentication credential associated with the intermediary storagedevice 120. The portable device 110 verifies that the intermediarystorage device 120 is a trusted device and then performs the functionrecited at block 410 when it receives a response from the cloud server130 indicating that the intermediary storage device is a trusted devicebased on the authentication challenge response received from theintermediary storage device 120. On the other hand, when the portabledevice 110 receives a response from the cloud server 130 indicating thatthe intermediary storage device 120 is not a trusted device based on theauthentication challenge response received from the intermediary storagedevice 120, the portable device 110 does not perform the functionrecited at block and may alternatively identify and/or couple to adifferent intermediary storage device 120 for uploading the digitalevidence to the cloud server 130.

At block 420, the portable device 110, after transmitting the requestfor approval to the cloud server 130, checks if an approval from thecloud server 130 has been received. If no response to the request hasbeen received from the cloud server 130 or if a response received fromthe cloud server 130 indicates that the request is rejected, theportable device 110, as shown in block 430, refrains from transmittingthe digital evidence 140 to the intermediary storage device 120 foruploading to the cloud server 130. In one embodiment, the receivedresponse may provide additional information identifying the reason forrejecting the request to upload the digital evidence 140. For example,the response may indicate that the request is not valid because theportable device 110 and/or the intermediary storage device 120 are notidentified as trusted devices by the cloud server 130 based on thereceived authentication credentials. As another example, the responsemay indicate that the intermediary storage device 120 is not capable ofor available for supporting the transfer of the digital evidence 140 tothe cloud server 130. The intermediary storage device 120 may bedetermined to be not capable of supporting the transfer of the digitalevidence when the data size of the digital evidence 140 is larger thanavailable storage size of the intermediary storage device 120 or whenthe intermediary storage device 120 has limited network capability tosupport the transfer of the digital evidence 140. In such cases, theportable device 110 refrains from transmitting the digital evidence 140to the intermediary storage device 120 and may further take one or moreadditional actions such as: deactivating a data connection establishedwith the intermediary storage device 120; providing an alert to the user(e.g., via the electronic display 350) that the intermediary storagedevice 120 is not capable of or not available for uploading the digitalevidence 140 to the cloud server 130; identifying another intermediarystorage device 120, for example, by presenting, via the electronicdisplay 350, an identifier and/or a location of another multi-unitcharger 200 that may be used for uploading the digital evidence 140.

On the other hand, when a response indicating approval to upload thedigital evidence 140 via the intermediary storage device 120 is receivedfrom the cloud server 130, the portable device 110, at block 440,transmits the digital evidence 140 to the intermediary storage device120 via the first communication link 150. In one embodiment, theresponse indicating the approval as received from the cloud server 130further identifies a resource identifier (e.g., a network address or auniform resource locator (URL) link) corresponding to a cloud storagecomponent associated with the cloud server 130 at which the digitalevidence 140 is to be uploaded. In this embodiment, the portable device110 transmits the resource identifier along with the digital evidence tothe intermediary storage device 120 to enable the intermediary storagedevice 120 to upload the digital evidence 140 to the cloud storagecomponent as identified by the resource identifier.

In one embodiment, the portable device 110 further transmits digitalevidence metadata 324 including data integrity code to the intermediarystorage device 120 to enable the intermediary storage device 120 tovalidate the data integrity of the digital evidence prior to uploadingthe digital evidence 140 to the cloud storage component of the cloudserver 130. The digital evidence 140 may be transmitted to theintermediary storage device 120 in real-time, for example, as a videostream. The intermediary storage device 120, may in turn, uploads thedigital evidence 140 to the cloud server 130, either in real time orafter receiving the entire stream from the portable device 110.

Next, at block 450, the portable device 110 transmits a request forapproval to delete the digital evidence 140 stored at the memory 320 ofthe portable device 110. In accordance with some embodiments, theportable device 110 is not enabled to delete the digital evidence 140stored at the memory 320 of the portable device 110 unless an approvalis received from the cloud server 130 which authorizes or causes theremoval of the digital evidence 140 from the memory 320 of the portabledevice 110. This approval is provided by the cloud server 130 only afterthe digital evidence 140 as identified by the digital evidence metadata324 is validated for data integrity and successfully stored at the cloudstorage component of the cloud server 130. This process of removing thedigital evidence after receiving an explicit approval from the cloudserver 130 ensures that the chain of custody of digital evidence 140 isnot violated. In addition, this process ensures that the digitalevidence captured at the portable device 110 is always linked to thecorrect user (i.e., user of the portable device 110 at the time ofcapturing the digital evidence) since, otherwise it is possible that theportable device 110 is re-assigned to another user while the digitalevidence captured by the previous user is still stored in the memory320. In accordance with some embodiments, the portable device 110 isre-assigned to another user only after removing the digital evidence 140from the memory 320 in accordance with the approval received from thecloud server 130.

The request for approval transmitted at block 450 may includeinformation included in the digitally signed metadata 324, for example,identifier of the digital evidence 140, to enable the cloud server 130to identify the digital evidence 140 and further check whether thedigital evidence 140 is validated for data integrity and uploaded to thecloud storage component of the cloud server 130. In one embodiment, theportable device 110 may receive an acknowledgment from the cloud server130 indicating that the digital evidence 140 is uploaded to the cloudserver 130 when the digital evidence 140 received from the intermediarystorage device 120 is validated for data integrity and stored at thecloud storage component of the cloud server 130.

Next, at block 460, the portable device 110 checks whether it hasreceived an approval from the cloud server 130 to delete the digitalevidence 140 stored at the memory 320 of the portable device 110. Whenthe portable device 110 receives the approval from the cloud server 130,the portable device 110 deletes the digital evidence 140 from the staticmemory 320 of the portable device 110 as shown in block 470. Theportable device 110 may present, via the electronic display 350, anotification to the user of the portable device 110 indicating that thedigital evidence 140 is deleted from the portable device 110. In oneembodiment, after deleting the digital evidence 140, the portable device110 may also present, via the electronic display 350, a notificationindicating that the portable device 110 is available for reassignmentwhen it is determined that the portable device 110 has been returned bythe user (e.g., placed on the multi-unit charger 200 at the end ofwork-shift) for reassignment.

Alternatively, when no approval is received, for example, before expiryof a set timer, or when a response received from the cloud server 130indicates that the request for approval to delete the digital evidence140 is rejected, the portable device 110, at block 480, refrains fromdeleting the digital evidence 140 from the memory 320 of the portabledevice 110. In this case, the response indicating the rejection mayfurther include information identifying a reason for rejecting therequest to delete the digital evidence 140. The cloud server 130 mayreject the approval to delete the digital evidence 140 for reasons suchas the digital evidence 140 as not being completely received from theintermediary storage device 120, or the digital evidence 140 as notbeing completely uploaded to the cloud storage component, or the dataintegrity of the digital evidence 140 as not being valid.

The portable device 110 may repeat the same process as described in themethod 400 for all digital evidences stored at the portable device 110.In accordance with some embodiments, the portable device 110 presents,via the electronic display 350, an indication that the device isavailable for re-assignment only when all digital evidences 140 storedat the memory 320 is successfully transferred to the cloud server 130.

FIG. 5 illustrates a flow chart diagram of a method 500 of operating acloud server 130 to preserve the chain of custody for digital evidence140 captured at the portable device 110 in accordance with someembodiments. While a particular order of processing steps is indicatedin FIG. 5 as an example, timing and ordering of such steps may varywhere appropriate without negating the purpose and advantages of theexamples set forth in detail throughout the remainder of thisdisclosure. As an example, the method 500 is performed by the electronicprocessor (not shown) of the cloud server 130. Other embodiments of themethod 500 may be performed on multiple processors within the samedevice or on multiple devices.

At block 505, the cloud server 130 receives a request for approval fromthe portable device 110 to upload digital evidence 140 to the cloudserver 130 via an intermediary storage device 120. The request forapproval includes a digitally signed digital evidence metadata 324 andalso a first authentication credential associated with the intermediarystorage device 120 and a second authentication credential associatedwith the portable device 110. The digital evidence 140 may correspond toone or more of: video data, audio data, text data, or combinationthereof, that are captured at the portable device 110. The first andsecond authentication credentials include one or more of a device/useridentifier, username-password, digital certificate, encrypted key,biometric key, and the like. The digital evidence metadata 324 includesa data integrity code that is generated as a function of the digitalevidence 140 to be uploaded, and further optionally includes informationrelated to one or more of: identifier (e.g., name of a video filecorresponding to the digital evidence 140) uniquely identifying thedigital evidence 140; a user profile or identifier of the owner of theportable device 110 or of the user operating the portable device 110 atthe time the digital evidence 140 was captured/stored; the evidence adata type/format (e.g., video, audio, text etc.) of digital evidence140; a time stamp of capturing/storing the digital evidence 140; a datasize of the digital evidence 140; location data identifying locations atwhich the digital evidence 140 was captured; an incident identifier(e.g., computer aided dispatch (CAD) identifier) corresponding to anincident assigned to the user of the portable device 110; one or moredata tags, for example, identifying person, object, or entity ofinterest associated with the digital evidence 140; and one or moreenvironmental data (e.g., sensor data such as temperature, ambient noiseetc.) corresponding to a location at which the digital evidence 140 wascaptured.

In one embodiment, the cloud server 130 receives the request forapproval via a secure communication channel, for example, a narrowbandcommunication channel, that is directly established (i.e., by bypassingthe intermediary storage device 120) between the cloud server 130 andthe portable device 110. In another embodiment, the cloud server 130 mayreceive the request for approval through the intermediary storage device120, via the second communication link 160.

In accordance with some embodiments, the cloud server 130 mayauthenticate the use of intermediary storage device 120 for transferringthe digital evidence 140 to the cloud server 130 prior to receiving thisrequest for approval from the portable device 110. In these embodiments,the cloud server 130 receives, from the portable device 110, anauthentication challenge response including the first authenticationcredential associated with the intermediary storage device 120. Thecloud server 130 then transmits a response indicating whether theintermediary storage device 120 is a trusted device or not.

Next, at block 510, the cloud server 130 verifies whether the receivedrequest for approval is valid based on the information included in thedigitally signed metadata 324, first authentication credentialassociated with the intermediary storage device 120, and secondauthentication credential associated with the portable device 110. Inone embodiment, the cloud server 130 verifies that the received requestfor approval is valid when one or more of the following conditions aresatisfied: a) the intermediary storage device 120 and portable device110 are respectively determined as trusted devices based on the firstand second authentication credentials received from the portable device110; and b) the intermediary storage device 120 is capable of supporting(e.g., in terms of storage capacity, network capability, oravailability) the transfer of the digital evidence 140 to the cloudserver 130. For example, the cloud server 130 determines that theintermediary storage device 120 is capable of supporting the transfer ofthe digital evidence 140 when the intermediary storage device 120 hasstorage capacity for storing an amount of data corresponding to the datasize of the digital evidence 140 as identified in the received digitallysigned evidence metadata 324. On the other hand, when the portabledevice 110 or intermediary storage device 120 is determined to be not atrusted device or when the intermediary storage device 120 is determinedto be not capable of supporting the transfer of digital evidence 140 tothe cloud server 130, the cloud server 130 verifies that the receivedrequest for approval is not valid.

Accordingly, when the cloud server 130 determines that the receivedrequest is not valid, the cloud server 130, at block 515, transmits aresponse, via the secure communication channel, indicating that therequest for approval to upload the digital evidence 140 is rejected. Inone embodiment, the response also includes additional informationidentifying the reason (e.g., intermediary storage device 120 does nothave sufficient storage) for rejecting the request. Alternatively, whenthe cloud server 130 determines that the received request is valid, thecloud server 130, at block 520, transmits a response indicating approvalto upload the digital evidence 140 via the intermediary storage device120. In one embodiment, the cloud server 130 includes in the response, aresource identifier (e.g., a network address or a URL link)corresponding to a cloud storage component of the cloud server 130 atwhich the digital evidence 140 is to be uploaded.

Next, at block 525, the cloud server 130 receives the digital evidence140 from the intermediary storage device 120, via the secondcommunication link 160 (for example, via a broadband communicationchannel). In one embodiment, the intermediary storage device 120receives the digital evidence 140 and forwards the digital evidence 140to a cloud storage component of the cloud server 130 as identified bythe resource identifier.

Next, at block 530, the cloud server 130 validates the data integrity ofthe received digital evidence 140 using the data integrity code includedin the digitally signed evidence metadata 324. For example, when thedata integrity code includes a checksum value corresponding to thedigital evidence 140, the cloud server 130 calculates checksum value onthe received digital evidence 140 and further compares the calculatedchecksum value with the received checksum value. If the two checksumvalues match, the data integrity of the received digital evidence 140 isensured and the cloud server 130 marks the validity of the dataintegrity to be valid. Otherwise, if the two checksum values do notmatch, the cloud server 130 marks the data integrity of the digitalevidence 140 to be invalid. While checksum values are used herein todescribe the data integrity validation process, other types offunctions, such as hash values can be used to validate the dataintegrity as well.

At block 535, the cloud server 130 determines whether the data integrityof the received digital evidence 140 is marked as valid. When the dataintegrity of the digital evidence 140 is marked as valid, the cloudserver 130, at block 540, stores the digital evidence 140 at a cloudstorage component associated with the cloud server 130. The cloud server130 may also send an acknowledgment indicating that the digital evidence140 is (i.e., after successfully validating the data integrity) uploadedto the cloud server 130. In one embodiment, after validating the dataintegrity, the cloud server 130 may further provide permission to theportable device 110 to delete the digital evidence 140, prior toreceiving a request for approval to delete the digital evidence 140 fromthe portable device 110. In accordance with some embodiments, the cloudserver 130 associates the digital evidence 140 stored at the cloudstorage component to various devices (and corresponding users) includinga source device (e.g., portable device 110) and intermediate devices(intermediary storage device 120) at which the digital evidence 140 wascaptured/stored prior to uploading the digital evidence 140 to the cloudserver 130. This association or linking of the digital evidence 140 tothe devices/users allows for tracing the chain of custody for digitalevidence 140 uploaded to the cloud server 130. In accordance with someembodiments, the entire digital evidence 140 along with the aboveassociation information is encrypted prior to being stored at the cloudstorage component of the cloud server 130.

At block 545, the cloud server 130 receives a request for approval, forexample, via the secure communication channel, to delete the digitalevidence 140 stored at the memory 320 of the portable device 110. Thisapproval is provided by the cloud server 130 only after the digitalevidence 140 as identified by the digital evidence metadata 324 isvalidated for data integrity and successfully stored at the cloudstorage component of the cloud server 130. The request for approvaltransmitted at block 450 may include information included in thedigitally signed evidence metadata 324, for example, identifier of thedigital evidence 140, to enable the cloud server 130 to identify thedigital evidence 140 and further check whether the digital evidence 140is validated for data integrity and uploaded to the cloud storagecomponent of the cloud server 130. In accordance with some embodiments,the portable device 110 is not enabled to delete the digital evidence140 stored at the memory 320 of the portable device 110 unless anapproval is received from the cloud server 130 which authorizes orcauses the removal of the digital evidence 140 from the memory 320 ofthe portable device 110.

At block 550, the cloud server 130 transmits, for example, via thesecure communication channel, a response indicating an approval todelete the digital evidence 140 since the cloud server 130, in thiscase, has already marked the data integrity of the digital evidence 140to be valid and stored the digital evidence 140 at the cloud storagecomponent as shown in block 540. In accordance with some embodiments,the cloud server 130 receives a confirmation from the portable device110 indicating that the digital evidence 140 is deleted from theportable device 110. In these embodiments, the cloud server 130, afterreceiving the confirmation, may transmit an instruction to the portabledevice to provide an indication that the portable device is availablefor reassignment when a reassignment request is received from theportable device and/or another user/device in the system 100.

Returning to block 535, when the cloud server 130 determines that thedata integrity of the digital evidence 140 is marked as invalid, thecloud server 130, as shown in block 555, refrains from storing thedigital evidence 140 at the cloud storage component of the cloud server130. Alternatively, the cloud server 130 may store the digital evidence140 at the cloud storage component, but does not link or associate thevarious devices/users associated with the digital evidence 140 to thestored digital evidence 140.

Next, at block 560, the cloud server 130 receives a request forapproval, for example, via the secure communication channel, to deletethe digital evidence 140 stored at the memory 320 of the portable device110. This approval is provided by the cloud server 130 only after thedigital evidence 140 as identified by the digital evidence metadata 324is validated for data integrity and successfully stored at the cloudstorage component of the cloud server 130. The request for approvaltransmitted at block 560 may include information included in thedigitally signed evidence metadata 324, for example, identifier of thedigital evidence 140, to enable the cloud server to identify the digitalevidence 140 and further check whether the digital evidence 140 isvalidated for data integrity and uploaded to the cloud storage componentassociated with the cloud server 130.

At block 565, the cloud server 130 transmits, for example, via thesecure communication channel, a response indicating that the request forapproval to delete digital evidence 140 is rejected since the cloudserver 130, in this case, has marked the data integrity of the receiveddigital evidence 140 to be invalid and further refrained from storingthe digital evidence 140 at the cloud storage component at block 555. Inthis case, the response indicating the rejection may further includeinformation identifying a reason (e.g., data integrity is not valid) forrejecting the request to delete the digital evidence 140.

In accordance with some embodiments, the cloud server 130 stores a fullaudit log of the above described process for traceability of the chainof custody for digital evidence 140. The audit log may includeinformation related to the type of messages transmitted and/or received(e.g., request message received or corresponding response messagetransmitted to approve the uploading or deletion of the digital evidence140 or to verify the authenticity of the intermediary storage device) atthe cloud server 130, type of actions performed at the cloud server 130(e.g., providing approval to upload or delete digital evidence 140,verifying data integrity, etc.), identifiers of the devices (e.g.,portable device 110 and intermediary storage device 120) from which themessages were transmitted; user identifiers corresponding to the users(e.g., user of the portable device 110) operating the device thatcaptured the digital evidence 140; time stamp associated with suchmessage transmission/reception or such actions; and the like. The auditlog allows the cloud server 130 and/or another device to trace the chainof custody for digital evidence 140, for example, to identify a deviceat which the digital evidence 140 was captured, or identify anintermediary storage device through which the digital evidence 140 wastransmitted before being stored at the cloud storage component, oridentify a user who was operating the device at the time of capturingthe digital evidence 140.

The chain of custody for digital evidence 140 captured at the portabledevice 110 is thereby preserved using the methods 400, 500 by: a)copying the digital evidence 140 from the portable device 110 to a morestable and redundant cloud storage component; b) ensuring that theintermediary storage device 120 is a trusted device prior totransmitting the digital evidence 140; c) digitally signing the evidencemetadata 324 including the data integrity code; d) enabling the cloudserver 130 to validate the digital evidence 140 using the data integritycode included in the digitally signed metadata 324; e) associating orlinking the uploaded digital evidence 140 to correct identity of theuser (e.g., officer) who captured the digital evidence 140 using theportable device 110; and f) deleting the digital evidence 140 from thememory 320 of the portable device 110 only after receiving an approvalto delete the digital evidence 140 from the cloud server 130. Inaccordance with some embodiments, the same process as described withreference to the methods 400, 500 are applied for transferring alldigital evidences 140 stored at the portable device 110 to the cloudserver 130.

While the above embodiments are directed towards transferring thedigital evidence 140 via the intermediary storage device 120, in someembodiments, the portable device 110 is configured to directly transferthe digital evidence 140 to a cloud storage component of the cloudserver 130. In these embodiments, the portable device 110 may havesufficient network capability (e.g., with LTE connection) to transferdigital evidence 140 including video data to the cloud server 130. Insome of these embodiments, the portable device 110 is configured totransfer digital evidence 140 directly to cloud server 130 based on aninstruction received from the cloud server 130. The cloud server 130 maysend instruction to portable device 110 to directly transfer the digitalevidence 140, for example, when it is determined that the intermediarystorage device 120 identified by the portable device 110 is not atrusted device or alternatively not capable of or available to transferthe digital evidence 140.

The benefits, advantages, solutions to problems, and any element(s) thatmay cause any benefit, advantage, or solution to occur or become morepronounced are not to be construed as a critical, required, or essentialfeatures or elements of any or all the claims. The invention is definedsolely by the appended claims including any amendments made during thependency of this application and all equivalents of those claims asissued.

Moreover in this document, relational terms such as first and second,top and bottom, and the like may be used solely to distinguish oneentity or action from another entity or action without necessarilyrequiring or implying any actual such relationship or order between suchentities or actions. The terms “comprises,” “comprising,” “has,”“having,” “includes,” “including,” “contains,” “containing” or any othervariation thereof, are intended to cover a non-exclusive inclusion, suchthat a process, method, article, or apparatus that comprises, has,includes, contains a list of elements does not include only thoseelements but may include other elements not expressly listed or inherentto such process, method, article, or apparatus. An element proceeded by“comprises . . . a,” “has . . . a,” “includes . . . a,” or “contains . .. a” does not, without more constraints, preclude the existence ofadditional identical elements in the process, method, article, orapparatus that comprises, has, includes, contains the element. The terms“a” and “an” are defined as one or more unless explicitly statedotherwise herein. The terms “substantially,” “essentially,”“approximately,” “about” or any other version thereof, are defined asbeing close to as understood by one of ordinary skill in the art, and inone non-limiting embodiment the term is defined to be within 10%, inanother embodiment within 5%, in another embodiment within 1% and inanother embodiment within 0.5%. The term “coupled” as used herein isdefined as connected, although not necessarily directly and notnecessarily mechanically. A device or structure that is “configured” ina certain way is configured in at least that way, but may also beconfigured in ways that are not listed.

It will be appreciated that some embodiments may be comprised of one ormore generic or specialized processors (or “processing devices”) such asmicroprocessors, digital signal processors, customized processors andfield programmable gate arrays (FPGAs) and unique stored programinstructions (including both software and firmware) that control the oneor more processors to implement, in conjunction with certainnon-processor circuits, some, most, or all of the functions of themethod and/or apparatus described herein. Alternatively, some or allfunctions could be implemented by a state machine that has no storedprogram instructions, or in one or more application specific integratedcircuits (ASICs), in which each function or some combinations of certainof the functions are implemented as custom logic. Of course, acombination of the two approaches could be used.

Moreover, an embodiment may be implemented as a computer-readablestorage medium having computer readable code stored thereon forprogramming a computer (for example, comprising a processor) to performa method as described and claimed herein. Examples of suchcomputer-readable storage mediums include, but are not limited to, ahard disk, a CD-ROM, an optical storage device, a magnetic storagedevice, a ROM (Read Only Memory), a PROM (Programmable Read OnlyMemory), an EPROM (Erasable Programmable Read Only Memory), an EEPROM(Electrically Erasable Programmable Read Only Memory) and a Flashmemory. Further, it is expected that one of ordinary skill,notwithstanding possibly significant effort and many design choicesmotivated by, for example, available time, current technology, andeconomic considerations, when guided by the concepts and principlesdisclosed herein will be readily capable of generating such softwareinstructions and programs and ICs with minimal experimentation.

The Abstract of the Disclosure is provided to allow the reader toquickly ascertain the nature of the technical disclosure. It issubmitted with the understanding that it will not be used to interpretor limit the scope or meaning of the claims. In addition, in theforegoing Detailed Description, it may be seen that various features aregrouped together in various embodiments for the purpose of streamliningthe disclosure. This method of disclosure is not to be interpreted asreflecting an intention that the claimed embodiments require morefeatures than are expressly recited in each claim. Rather, as thefollowing claims reflect, inventive subject matter lies in less than allfeatures of a single disclosed embodiment. Thus the following claims arehereby incorporated into the Detailed Description, with each claimstanding on its own as a separately claimed subject matter.

We claim:
 1. A method for preserving chain of custody for digitalevidence captured at a portable device, the method comprising:transmitting, at the portable device, to a cloud server, a request forapproval to upload the digital evidence to the cloud server via anintermediary storage device, the request comprising a digitally signedmetadata associated with the digital evidence, a first authenticationcredential associated with the intermediary storage device, and a secondauthentication credential associated with the portable device, whereinthe digitally signed metadata includes a data integrity code that isgenerated as a function of the digital evidence to be uploaded;receiving, at the portable device, a first response to the request forapproval from the cloud server, the first response indicating approvalto upload the digital evidence to the cloud server via the intermediarystorage device; responsive to receiving the first response,transmitting, at the portable device, the digital evidence to theintermediary storage device for uploading to the cloud server;transmitting, at the portable device, to the cloud server, a request forapproval to delete the digital evidence from the portable device;receiving, at the portable device, a second response from the cloudserver, the second response indicating an approval to delete the digitalevidence from the portable device; and responsive to receiving thesecond response, deleting, at the portable device, the digital evidencefrom the portable device.
 2. The method of claim 1, further comprising:responsive to deleting the digital evidence from the portable device,providing, at the portable device, an indication that the portabledevice is available for reassignment.
 3. The method of claim 1, whereinthe data integrity code enables the cloud server to validate the dataintegrity of the digital evidence uploaded to the cloud server using thedata integrity code.
 4. The method of claim 1, further comprising:transmitting the data integrity code to the intermediary storage deviceto enable the intermediary storage device to validate the data integrityof the digital evidence prior to uploading the digital evidence to thecloud server.
 5. The method of claim 1, wherein prior to transmittingthe request for approval, the method further comprising: verifying thatthe intermediary storage device is a trusted device based on the firstauthentication credential associated with the intermediary storagedevice.
 6. The method of claim 5, wherein verifying that theintermediary storage device is the trusted device comprises:transmitting, at the portable device, an authentication challenge to theintermediary storage device; receiving, at the portable device, anauthentication challenge response including the first authenticationcredential from the intermediary storage device; forwarding, at theportable device, the authentication challenge response to the cloudserver for verification at the cloud server; and receiving, at theportable device, a response from the cloud server, the responseindicating that the intermediary storage device is a trusted device. 7.The method of claim 1, wherein prior to transmitting a request forapproval to delete the digital evidence, the method comprising one of:receiving, at the portable device, from the cloud server, anacknowledgment indicating that the digital evidence is uploaded to thecloud server.
 8. The method of claim 1, wherein the digitally signedmetadata further includes information selected from the group consistingof: a unique identifier assigned to the digital evidence; a time stampassociated with the digital evidence; data size of the digital evidence;a location associated with the digital evidence; an incident identifierassociated with the digital evidence; and one or more tags associatedwith the digital evidence.
 9. The method of claim 1, wherein theportable device is a body wearable camera.
 10. The method of claim 1,wherein the intermediary storage device is a multi-unit chargerconfigured to charge multiple portable devices simultaneously, themethod further comprising: charging a battery at the portable devicewhile the digital evidence is being uploaded to the cloud server via themulti-unit charger.
 11. The method of claim 1, wherein the request forapproval to upload the digital evidence is transmitted to the cloudserver via a narrowband communication channel established between theportable device and the cloud server and further wherein the digitalevidence is transmitted to the cloud server via a broadbandcommunication channel established between the intermediary storagedevice and the cloud server.
 12. A method for preserving chain ofcustody for digital evidence captured at a portable device, the methodcomprising: receiving, at a cloud server, from the portable device, arequest for approval to upload the digital evidence to the cloud servervia an intermediary storage device, the request comprising digitallysigned metadata associated with the digital evidence, a firstauthentication credential associated with the portable device, and asecond authentication credential associated with the intermediarystorage device, wherein the digitally signed metadata includes a dataintegrity code that is generated as a function of the digital evidenceto be uploaded; verifying, at the cloud server, whether the request isvalid based on the digitally signed metadata, first authenticationcredential, and second authentication credential; responsive toverifying that the request is valid, transmitting, at the cloud server,to the portable device, a first response indicating approval to uploadthe digital evidence to the cloud server via the intermediary storagedevice; receiving, at the cloud server, in response to transmitting thefirst response, the digital evidence from the portable device via theintermediary storage device; validating, at the cloud server, the dataintegrity of received digital evidence using the data integrity code;storing the received digital evidence at a cloud storage component ofthe cloud server when the data integrity of the received digitalevidence is valid; receiving, at the cloud server, a request forapproval to delete the digital evidence from the portable device; andtransmitting, at the cloud server, a second response indicating anapproval to delete the digital evidence from the portable device. 13.The method of claim 12, further comprising: receiving, at the cloudserver, a confirmation that the digital evidence is deleted from theportable device; and responsive to receiving the confirmation,transmitting an instruction to the portable device to provide anindication that the portable device is available for reassignment. 14.The method of claim 12, wherein prior to transmitting the secondresponse, the method comprising: determining, at the cloud server, thatthe data integrity of the received digital evidence is valid.
 15. Themethod of claim 12, wherein the digitally signed metadata furtherincludes information selected from the group consisting of: a uniqueidentifier assigned to the digital evidence; a time stamp associatedwith the digital evidence; data size of the digital evidence; a locationassociated with the digital evidence; an incident identifier associatedwith the digital evidence; and one or more tags associated with thedigital evidence.
 16. The method of claim 15, wherein prior totransmitting the first response indicating approval, the method furthercomprising: verifying that the intermediary storage device is capable ofstoring an amount of data corresponding to the data size of the digitalevidence.
 17. The method of claim 12, further comprising: responsive toverifying that the request is not valid, transmitting, at the cloudserver, to the portable device, a third response rejecting the requestto upload the digital evidence to the cloud server.
 18. The method ofclaim 12, further comprising: responsive to determining that the dataintegrity of the received digital evidence is not successfully validatedusing the data integrity code, transmitting, at the cloud server, anacknowledgment to the portable device indicating that the digitalevidence is not uploaded at the cloud server.
 19. The method of claim12, wherein the portable device is a body wearable camera, and furtherwherein the intermediary storage device is a multi-unit chargerconfigured to charge multiple portable devices simultaneously.
 20. Aportable device, comprising: a memory for storing digital evidence; acommunications unit configured to be coupled with an intermediarystorage device for transferring the digital evidence to a cloud servervia the intermediary storage device; and an electronic processorcommunicatively coupled with the memory and communications unit, theelectronic processor configured to: transmit, via the communicationsunit, to the cloud server, a request for approval to upload the digitalevidence to the cloud server via the intermediary storage device, therequest comprising a digitally signed metadata associated with thedigital evidence, a first authentication credential associated with theintermediary storage device, and a second authentication credentialassociated with the portable device, wherein the digitally signedmetadata includes a data integrity code that is generated as a functionof the digital evidence to be uploaded; receive, via the communicationsunit, a first response to the request for approval from the cloudserver, the first response indicating approval to upload the digitalevidence to the cloud server via the intermediary storage device;responsive to receiving the first response, transmit, via thecommunications unit, the digital evidence to the intermediary storagedevice for uploading to the cloud server; transmit, via thecommunications unit, to the cloud server, a request for approval todelete the digital evidence from the memory; receive, via thecommunications unit, a second response from the cloud server, the secondresponse indicating an approval to delete the digital evidence from theportable device; and responsive to receiving the second response, deletethe digital evidence from the memory.